SecurityLightRAG Critical Auth Bypass Vulnerability
A hardcoded secret in LightRAG allows unauthenticated attackers to bypass API key protections and gain full control over document operations.
> Search
30 results for “sec”
Security
Cyber CrimeEstée Lauder Breach Tied to Oracle Flaw
A critical vulnerability in Oracle E-Business Suite led to the exposure of personal data at the global cosmetics firm.
Tech NewsNatural Targets AI-Driven Payment Rails
Startup Natural secures $30 million to build financial infrastructure specifically for the autonomous agent economy.
SecurityWeaponized AI Workloads Threaten Grid
Researchers detail how malicious GPU workloads could trigger cascading power grid failures through high-frequency electrical modulation.
TrendingNew Legislation Targets Web Crawling
Proposed laws targeting anonymous crawlers could undermine digital research, privacy, and cybersecurity efforts across the open web.
Cyber CrimeLLM-Assisted Phishing Kits Scale Attacks
Researchers uncovered an exposed server revealing how attackers use AI to industrialize the creation of malware delivery campaigns.
SecurityNeo Secures $100M for AI Control Layer
The American-Israeli startup steps out of stealth with significant backing to manage agentic software risks within enterprises.
Cyber CrimeCruciferra Crypter Evolves Malware Tactics
A sophisticated crypter service is leveraging process ghosting and kernel-driver abuse to cloak various commodity malware strains.
Tech NewsInfinity Secures $15M for Hardware Stack
The infrastructure startup aims to challenge Nvidia’s dominance by automating low-level code generation for various AI chip architectures.
Cyber CrimeCraneware Data Breach Impacts US Health
A cyberattack on the billing software provider has resulted in the theft of employee, customer, and partner records.
SecurityModernizing Risk for the AI Enterprise
Security leaders are shifting from traditional risk management toward proactive business enablement as AI adoption accelerates.
SecurityHugging Face Incident Exposes Risks
Internal datasets and service credentials were compromised as attackers utilized a malicious dataset to gain unauthorized access.
Cyber CrimeHugging Face Network Breach Highlights AI
An autonomous AI agent framework successfully breached internal Hugging Face infrastructure, marking a shift in attacker tactics.
Cyber CrimeRussian Intel Targets NATO Logistics
Intelligence agencies report that Russian actors are hijacking IP cameras to monitor military movements across Europe and Ukraine.
SecurityThe Ransomware Dilemma: Pay or Pivot
As ransomware groups adopt corporate-style tactics, victims face mounting pressure to decide between recovery risks and total data loss.
SecurityTracking Breaches Without the Guesswork
A new index aims to standardize how we monitor material cyber incidents by prioritizing verifiable data over industry-wide estimates.
SecurityJadePuffer Targets AI Model Artifacts
The agentic threat actor JadePuffer is using a new ransomware variant specifically engineered to destroy critical AI model assets.
Cyber CrimeEY Breach Exposes Sensitive Tax Data
A third-party platform compromise has led to the unauthorized access of client tax documents at Ernst & Young.
Cyber CrimeRansomware Gangs Vie for Cyber Supremacy
A rivalry between major threat actors is escalating, with data showing a surge in attacks targeting small businesses and large enterprises.
Cyber CrimeEY Support Platform Breach Exposed Data
A third-party IT management tool used by Ernst & Young was compromised, leading to the unauthorized exfiltration of tax documents.
Tech NewsDell Shutdown Bug Prompts OOB Fix
Microsoft has deployed emergency updates for Windows 11 to resolve hardware conflicts triggering unexpected power-downs on Dell systems.
SecurityCapital One Releases VulnHunter Tool
The financial giant is open-sourcing its AI-powered security tool to help address software vulnerabilities at the code level.
ServiceNow Sandbox Breach Escalates
Enterprise AI systems face active exploitation of a high-complexity remote code execution flaw following a recent patch release.
SecurityNGINX Flaw: Why Default Security Fails
A critical heap buffer overflow in NGINX puts remote code execution within reach, bypassing common defensive assumptions.
SecurityWP2Shell Flaws Force Rapid WordPress Patch
A pair of newly identified vulnerabilities dubbed WP2Shell are being actively exploited in the wild, triggering forced site updates.
SecurityThe Mythos Effect on Threat Landscapes
Anthropic's frontier AI is changing vulnerability discovery, forcing a rapid shift in how organizations prioritize defense.
Cyber CrimeAI Connectors Escalate Security Exposure
Third-party AI integrations evolve too quickly for traditional security models, exposing enterprise data to unforeseen downstream risks.
Tech NewsApple’s Legal Strategy Stalls OpenAI
A new trade secrets lawsuit against OpenAI creates potential delays for the company's hardware ambitions and upcoming IPO.
SecurityClaude Extension Bypass Stays Open
Researchers report that critical security flaws in the Claude Chrome extension remain unpatched despite prior vulnerability disclosures.
SecurityRussian Infrastructure Targeted by HelloNet
Threat actors are weaponizing legitimate security software updates to infiltrate high-value government and private sector networks.